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SINGLE SIGN-ON SERVICE FOR COMMUNICATION NETWORK MESSAGING 

Field of the Invention 

This invention relates to communication networks and to a system that 
enables a subscriber to use a single sign-on process from any communication 
5 device to access multiple messaging services. 

Problem 

It is a problem in the field of messaging communications that a subscriber 
must initiate a separate login process for each of the messaging services to which 
they subscribe. There are a number of messaging services that are available to 

10 subscribers, including, but not limited to: Short Message Service (SMS), unified 
messaging, voicemail messaging. Each of these services maintains a set of 
account information for the subscriber yet cannot share this information across 
applications. Therefore, the subscriber must enter login information and a 
password for each service that is accessed. In addition, some of these services 

1 5 offer address book and calendar features in disjunct fashion. 

From a wireless network perspective, the service applications and 
subscriber databases are not standard and integrated to provide a unified 
subscriber access. Each service is architected using a separate, proprietary 
database to authenticate the subscriber, and to maintain the subscriber's address 

20 and calendar data. 

Therefore, the existing state of subscriber messaging communications is 
that there is a proliferation of communication devices, each with its own set of 
messaging services. The subscriber can have a pager, cell phone, office personal 
computer, home personal computer, Personal Digital Assistant, office wire-line 

25 telephone, personal wire-line telephone. The subscriber receives messages via 
office voice mail, cell phone voice mail, home voice-mail, office e-mail, home e- 
mail, cell phone text messages, fax messages, etc. Each of these communication 
devices is equipped with a directory of contact numbers & addresses. Although 
presently unavailable from these existing messaging services, the subscriber 

30 would be best served by a single access point to retrieve and respond to 
messages, regardless of their source. The access would preferably be through a 
speech activated interface to thereby enable hands-free communications. 
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Solution 

The above-described problems are solved and a technical advance 
achieved in the field by the present Single Sign-On Service for Communication 
Network Messaging (termed "single sign-on system" herein) which provides a 
5 wireless subscriber with the ability to login with a single service provider and then 
move seamlessly among the allowed messaging services to share personal 
address book and calendaring applications. The subscriber logs into the network 
from either the wireless station set interface or from the WEB user interface using 
a laptop or personal computer to access an AnyPath Web server. Once the 
10 subscriber has signed on to the AnyPath Web server, the subscriber's account 
information is accessed in a centralized profile for messaging services (Short 
Message Service (SMS), unified messaging, voice-mail messaging) using a single 
directory server and integrated address book and calendar services. 

Brief Description of the Drawings 
15 Figure 1 illustrates the overall architecture of the present single sign-on 

system and a typical operating environment; 

Figure 2 illustrates the directory component of the present single sign-on 
system; 

Figures 3A & 3B illustrate in flow diagram form the operation of the present 

20 single sign-on system; and 

Figures 4-6 illustrate typical user interface displays that are presented to a 
subscriber by the present single sign-on system in the execution of various 
subscriber-selected functions. 

Detailed Description of the Drawings 

25 The existing state of subscriber messaging communications is that there is 

a proliferation of communication devices, each with its own set of messaging 
services. The subscriber can have a pager, cell phone, office personal computer, 
home personal computer, Personal Digital Assistant, office wire-line telephone, 
personal wire-line telephone. The subscriber receives messages via office voice 

30 mail, cell phone voice mail, home voice-mail, office e-mail, home e-mail, cell phone 
text messages, fax messages, etc. Although presently unavailable from these 
existing messaging services, the subscriber would be best served by a single 
access point to retrieve and respond to messages, regardless of their source. The 
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access would preferably be through a speech activated interface to thereby enable 

hands-free communications. 

Architecture of the Single Sign-On System 

Figure 1 illustrates the overall architecture of the present single sign-on 
5 system and a typical operating environment and Figure 2 illustrates the directory 
component of the present single sign-on system. The subscriber, using a 
communications device (such as a cell phone 111, WAP handset 112, laptop 
computer 113, personal computer 114), can access a single sign-on system 100 
which serves to integrate a plurality of different types of communication devices, 

10 each with its own set of messaging services, to an AnyPath unified messaging 
system 102, Messaging Link messaging gateway 101, SMS systems 103, Voice 
Profile for Internet Messaging systems 104, and the like. The WAP subscriber 
devices 111 and PDA subscriber devices 112 connect to a WAP gateway 145 to 
interconnect via the Internet 110 to the single sign on service 100 via the gateway 

15 system 141. Firewalls 125, 126, 143, 144 are typically used to protect the integrity 
of the data maintained by the single sign on system 100. 

The single sign-on system 100 operates to enable a subscriber to obtain 
access to the plurality of messaging services via either a Telephone User Interface 
or a WEB User interface 121. The single sign-on system 100 provides a service 

20 that includes the integration of Lucenfs AnyPath unified messaging system 102, 
Messaging Link 101 messaging gateway which serves a plurality of messaging 
services 106, and SMS systems 103 using a centralized directory server 105 using 
a Lightweight Database Access Protocol (LDAP) as a typical data communications 
standard Protocol. This integration of the unified messaging system component 

25 122 of the single sign-on system 100 with the Lightweight Database Access 
Protocol directory 105 provides a wireless subscriber with the ability to login with a 
single service provider and then move seamlessly among the allowed messaging 
services to share personal address book and calendaring applications. 

The single sign-on system directory 105 stores all subscriber profile data in 

30 a unified database that contains components 101A-104A that are received from 
the associated messaging systems 101-104. The single sign-on system directory 
105 is updated by the various messaging systems 101-104 for provisioning new 
subscribers and updating subscriber profile data in real time. The single sign-on 
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system directory 105 contains subscriber profile data such as mobile telephone 
number, spoken name, e-mail address, services access, and links to the personal 
address book and calendar servers. The single sign-on system directory 105 
authenticates and then allows the subscriber to access messaging services that 
5 are enabled in their profile. The service operates on either the Telephone User 
Interface or from the WEB User interface. 

Thus, the single sign-on system 100 enables a subscriber to access voice 
mail, e-mail and faxes from any device. This includes access to the Messaging 
Link messaging gateway, which provides nationwide messaging including 
10 broadcast messaging and Internet voice messaging using a centralized directory 
server. 

Any Path™ Messaging System 

The AnyPath™ Messaging System 102 is a commercially available product 
distributed by Lucent Technologies and consists of a next-generation highly 

15 scaleable and reliable messaging platform that offers unified messaging (UM), 
unified communications (UC), and multimedia messaging services to end-users. 
The AnyPath™ Messaging System 102 offers an intuitive natural experience for 
subscribers to access and manage their messages, voice, fax, and email, from any 
phone 111 (fixed and wireless), Personal Computer 114, PDA 112, laptop 113, or 

20 Web browser - anywhere in the world -simply and easily. 

In addition, the AnyPath™ Messaging System 102 offers media conversion 
through text-to-speech and text-to-fax engines, Speech-Activated Messaging and 
Voice-Activated Dialing for hands-free operations, and state-of-the-art portal 
technologies for accessing the Internet in real time. The AnyPath™ Messaging 

25 System 102 is able to integrate with an existing messaging infrastructure including 
legacy voice mail systems. The AnyPath™ Messaging System 102 provides call 
answering, simple message storage and retrieval capabilities. This includes 
advanced mailbox management such as group lists, notification using a variety of 
methods such as Message Waiting Indication (MWI), Short Message Service 

30 (SMS), Paging, etc., outbound calling such as callback, call sender rebound, cut- 
through paging, and message composition, forwarding and broadcast. The 
AnyPath™ Messaging System 102 allows users to seamlessly access, retrieve, 
and manage email, voice mail, and fax, from PC or telephone (wireline or 
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wireless), irrespective of the message type using advanced features such as Text- 
to-speech, Text-to-fax, etc. The AnyPath™ Messaging System 102 allows 
consumers to use the "spoken word," to access a personalized address book for 
voice activated dialing and a variety of user friendly information from the World 
5 Wide Web 107. The Voice Portal provides: Voice activated dialing (for address 
book) and Voice service for accessing the internet (stock market quotes, weather, 
sports, television shows, etc.). The AnyPath™ Messaging System Web Browser 
aggregates content from multiple sources into a single Personal Communications 
Information Portal (PCIP). 

10 AnyPath Messaging System 102 consists of the Telephony Server 121, 

Administration and Control Server, Message Store, Web Server 121, and Personal 
Address Book/Calendar directory server 122. The Telephony Server is 
responsible for accepting and processing the call from the central office switch via 
T1 trunks and supports SS7 signaling protocol for call set up. The Telephony 

15 Server also interfaces with the AnyPath Automatic Speech Recognition (ASR) 
servers 131, Text To Speech (TTS) servers 132, VoiceXML servers 140, which are 
a local shared resource for multiple telephony servers. Administration and Control 
Server (ACS) 123, 124 provides the Operations, Administration, Maintenance, and 
Provisioning interface to the AnyPath Messaging System 102, It contains the 

20 mailbox locator which identifies what message store the subscriber data is located 
on. The Administration and Control Server 123, 124 also includes the logic to 
interface and control the Personal Address Book/Calendar directory. The 
message store consists of multiple centralized servers that hold the user voicemail 
messages. The Web server provides the Web User Interface access to the 

25 AnyPath Messaging System 102 service wide directory including Personal 
Address Book and Calendar. Personal Address Book/Calendar Server 122 are 
directory servers supporting standard Lightweight Database Access Protocol 
(LDAP). 

Messaging Link 

30 Messaging Link 101 provides Caller Application (CA) subscribers with 

powerful, new capabilities, such as the ability to reply-to-telephone answering, 
real-time spoken name confirmation of dialed address, and intelligent message 
routing. Intelligent message routing can be used as the initial step to reduce the 
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cost of implementing and maintaining the networked messaging infrastructure. 
When combined, these capabilities can build stronger and larger messaging 
communities for subscribers. For example the Reply to Telephone Answer service 
makes it easier for recipients of messages on a Messaging Link networked 
5 solution to respond to messages. If the sender has a voice mailbox, the recipient 
only needs to use a key sequence to automatically address the sender. There is 
no need to key in the address when responding to a message. 
Caller Application 

The Caller Application (CA) 107 is Lucent's legacy voicemail system. This 

10 voicemail system is used in the case when a user is sending a voice message to 
another voicemail system through a gateway server called MessagingLink 101. 
MessagingLink 101 is Lucent's Voice Profile for Internet Messaging (VPIM) 
standard gateway server. When a subscriber is added, deleted, or changed on the 
Caller Application 107 voicemail system, MessagingLink 101 automatically 

15 receives the changed user record data and then automatically updates the Service 
Wide Directory. MessagingLink 101 receives spoken name, extended absence 
greeting flag, blocked messages flag, and mailbox full flag from the Caller 
Application voicemail system 107. 

Both AnyPath 102 and Caller Application 107 users have the ability to 

20 create a voice message and send it to a user on another voicemail system through 
MessagingLink 101. MessagingLink 101 supports the VPIM standard that enables 
proprietary systems to send/receive messages. The MessagingLink 101 uses the 
service wide directory (LDAP protocol) to validate the recipient of the message and 
identify its routing address. In addition to Personal Address Book and Calendar, 

25 the service wide directory includes subscriber data specifically for Voice Profile for 
Internet Messaging messaging. The directory includes the subscriber's spoken 
name, extended absence greeting flag, blocked messages flag, and mailbox full 
flag from the voicemail system. 
Operation of the Single Sign-On System 

30 Figures 3A & 3B illustrate in flow diagram form the operation of the present 

single sign-on system and Figures 4-6 illustrate typical user interface displays that 
are presented to a subscriber by the present single sign-on system in the 
execution of various subscriber-selected functions. 
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In operation, the subscriber at step 301 initiates a communication link from 
a communication device, such as wireless phone 111, to a local serving 
communication system, such as WAP gateway 145 to initiate communication with 
the single sign-on system 100. At step 302, the serving communication system 
5 145 extends the communications link from the subscriber's communication device 
111 to the single sign-on system 100 via the Internet 110. The subscriber, once 
logged in to the Internet 110 using their Browser, uses the URL of the AnyPath 
Web site 142 at step 303 to retrieve the AnyPath web page. The AnyPath web 
server web page prompts subscriber to enter their mobile telephone number and 
10 password at step 304 into the designated data fields in the AnyPath web server 
web page. 

The AnyPath system 102 validates the subscriber's telephone number and 
password in the subscriber profile database on the AnyPath Administration and 
Control Server directory server at step 305. The master directory 105 located in 

15 the single sign-on system 100 authenticates the subscriber and then allows the 
subscriber to access the messaging services that are enabled in their profile and 
that are accessible via the integrated service systems noted above via a typical 
display such as that shown in Figure 4. The master directory 105 contains 
subscriber profile data, such as mobile telephone number, spoken name, e-mail 

20 address, services access, and links to the personal address book and calendar 
servers that serve the subscriber, to enable the subscriber access their services. 
The subscribers can move seamlessly among the allowed messaging services to 
share messaging applications. 

Upon successful logon, the AnyPath web server presents the subscriber 

25 with the AnyPath Messaging home page at step 306. The AnyPath Messaging 
home page has several tabs that the subscriber can click on to perform specific 
functions such as voicemail, fax and email message retrieval, personal options, 
personal address book and calendar. There are two main components to enabling 
unified access to user data - the service wide directory and user interface. 

30 AnyPath provides a centralized service wide directory 105 that includes the 
Personal Address Book and Calendar sub-directories. The personal address book 
contains the user contact list data which includes contact name, address, 
telephone number, mobile phone number, and email address. The calendar data 
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includes the date, time, location, and notification of specific events. The user 
interface enables the ability for the subscriber to access and update the various 
databases. The user can access and update the personal address book and 
calendar directories from the AnyPath Web User Interface. The subscriber is able 
5 enter calendar event information or modify contact list data from a web screen. 

As an example, the subscriber decides to click on the tab for personal 
address book at step 307. The AnyPath web server displays at step 308 the 
subscriber's personal address book page with a list of subscriber options as shown 
in Figure 6. The subscriber can select to add a new contact, delete a contact, or 

10 change an existing contact. The subscriber can add or delete or modify a personal 
distribution list for sending voice/email messages as well. The subscriber selects 
one of these options at step 309 and then the AnyPath web server displays the 
appropriate web page at step 310. The subscriber enters the data at step 31 1 and 
then the web server at step 312 passes the data to the AnyPath Administration 

15 and Control Server 123, 124 to add or delete or change the subscriber's personal 
address book directory 105. 

AnyPath also supports the ability for a user to import a data file from their 
Personal Computer 114 into the AnyPath Personal Address Book and Calendar 
sub-directories of the service wide directory 105. Both the personal address book 

20 and calendar sub-directories also support importing data from PDA devices 112 
and Microsoft Outlook software using comma separated value test format files. 
The subscriber clicks on a web screen button to select the file to be imported into 
the AnyPath service wide directory. AnyPath would accept the file and then import 
the data into the directory using LDAP standard protocol. The user is also able to 

25 update their personal address book through the AnyPath Voice Activated Dialing 
application 131. The subscriber would dial a 10-digit number or short code (i.e. 
*86) from their handset to access AnyPath and be placed into the Voice Activated 
Dialing service. At this point, the user can speak a pre-defined phrase such as 
"Go to Contact List". AnyPath would recognize the command and enable the user 

30 to add, delete, and change a contact list using speech commands. AnyPath would 
collect the voice imprint data and store it in the personal address book directory. 
The subscriber then receives a message from AnyPath stating that the action was 
successful. The subscriber can continue to update the personal address book or 
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they may choose to return to the main menu and select another option. 

The subscriber now selects the tab with calendar at step 313. The AnyPath 
web server displays the calendar web page as shown in Figure 5 to the subscriber 
at step 314. The subscriber is able to enter, delete, or modify calendar events on 
5 screen at step 315. They can also click on a specific date and enter an 
appointment into their calendar. The calendar screen is used to manage specific 
date/time events. The subscriber is also able to import/export data to their PDA 
devices 112 from the calendar screen by selecting on the appropriate button. The 
AnyPath web server queries and updates the AnyPath Administration and Control 
10 Server calendar directory. The subscriber then chooses to log off the web page by 
exiting at step 316. 
Summary 

The present single sign-on system provides a wireless subscriber with the 
ability to login with a single service provider and then move seamlessly among the 
15 allowed messaging services to share personal address book and calendaring 
applications. 
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